principle-prove-it-works
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill provides procedural guidance for task verification and quality control, ensuring that the agent's output matches the intended requirements. No malicious indicators or security risks were found in the instructions.\n- [INDIRECT_PROMPT_INJECTION]: The verification process requires the agent to ingest and analyze external data such as task outputs, file diffs, and system values, which constitutes an ingestion surface for potentially untrusted data.\n
- Ingestion points: System artifacts, task output, and requirement records extracted from the environment.\n
- Boundary markers: The skill mentions preserving
backstoporjudgmenttags for scope management.\n - Capability inventory: The agent is instructed to read values, inspect diffs, and execute verification scripts.\n
- Sanitization: No specific sanitization or filtering logic is provided for the artifacts being verified.\n- [DYNAMIC_EXECUTION]: The skill encourages the agent to generate and run deterministic scripts to verify results. While this involves code execution, it is presented as a standard method for quality control and verification within the agent's existing execution workspace.
Audit Metadata